CVE-2017-9150: Exposure of Sensitive Information to an Unauthorized Actor

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...

PT-2017-18732

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1 Description The issue concerns the do check function in the Linux kernel, which fails to restrict the output of sensitive address information. This allows local users to obtain sensitive address informatio...

CVE-2016-4557

The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service use-after-free via crafted BPF instructions that reference an incorrect file...

CVE-2016-4557: Undefined Security Weakness

The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service use-after-free via crafted BPF instructions that reference an incorrect file...

PT-2016-6018

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.5 Description The issue arises from the replace map fd with map ptr function in kernel/bpf/verifier.c, which fails to properly maintain an fd data structure. This allows local users to gain privileges or caus...

CVE-2016-2383

The adjustbranches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions...

CVE-2016-2383: Undefined Security Weakness

The adjustbranches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions...

PT-2016-5150

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions. This is due to the adjust branches function i...

CVE-2014-3145

The BPFSANCNLATTRNEST extension implementation in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service over-read and system crash via crafted BPF instructions. NOTE:...